Timeline

• Jul 13, 2024 CVE Published
• Jul 13, 2024 PoC Published

References

• important: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect (CVE-2024-38476) advisory